5. CVE-2021-4160 - OpenSSL

Published: 01/28/2022

Recommendation:

The issue only affects MIPS platforms, and we don’t have MIPS in EDK2.

Until further notice, the following versions of OpenSSL are appropriate to use within the EDK2 CryptoPkg:

• OpenSSL 1.1.1j, updated in the edk2-stable202105 stable tag
• OpenSSL 1.1.1n, updated in the edk2-stable202205 stable tag